CVE-2017-15265: Linux Kernel

High severity, CVSS 7.0. EPSS: 0.4% chance of exploitation in the next 30 days.

Race condition in the ALSA subsystem in the Linux kernel before 4.13.8 allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted /dev/snd/seq ioctl calls, related to sound/core/seq/seq_clientmgr.c and sound/core/seq/seq_ports.c.

Affected products

• Linux Linux Kernel: before 3.2.95 (fixed in 3.2.95); from 3.3, before 3.10.108 (fixed in 3.10.108); from 3.11, before 3.16.50 (fixed in 3.16.50); from 3.17, before 3.18.76 (fixed in 3.18.76); from 3.19, before 4.1.46 (fixed in 4.1.46); from 4.2, before 4.4.93 (fixed in 4.4.93); …

Published 2017-10-16. Last modified 2026-06-17.